WO2010057405A1

WO2010057405A1 - Identity authentication method using short messages

Info

Publication number: WO2010057405A1
Application number: PCT/CN2009/074489
Authority: WO
Inventors: 孙迎彤; 纪晓民
Original assignee: 国民技术股份有限公司
Priority date: 2008-11-24
Filing date: 2009-11-03
Publication date: 2010-05-27
Also published as: CN101742504A

Abstract

An identity authentication method using short messages is used in the identity authentication between a mobile terminal (101) and the bank server when electric payment or account transfer is performed, and is used in the short message communication system established among the mobile terminal (101), the short message server (103) and the background server (104). Besides the common SIM function, the intelligent SIM card (101) of the mobile terminal (101) has the encryption and digital signature function. By adding the identity authentication identification of the sender into the sent message by the SIM card of the mobile terminal and the short message server (103), the receiver is able to obtain the actual identity of the sender correctly by authenticating the identity identification in the short message. The advantageous effect of the present invention is that: by sending the short message having the signature information of the sender to the opposite party, and authenticating the signature by the receiver, the mobile terminal or the bank can know the identity of the sender correctly, so as to ensure the security of the payment consumption of the mobile terminal.

Description

Method for authenticating identity using short messages

Technical field

Field of the Invention This invention relates to record carriers for use with machines, and more particularly to record carriers with semiconductor circuit components, and more particularly to methods for authenticating ID cards using short messages. Background technique

With the development of technology, there are many ways to use mobile terminals, especially on ordinary mobile phones.

(hereinafter referred to as "mobile phone,") The SIM card (subscr iber ident i ty model) adds various intelligent circuit modules, in addition to the basic SIM card function, it also has functions such as encryption and decryption, digital signature, etc. Integrate your phone with an e-wallet and turn it into a tool with the ability to pay.

Currently, a mobile phone can be used to make such a consumption mode: using the electronic wallet in the mobile phone for shopping and transfer, P0S (sales terminal) sends a bill to the mobile phone, the mobile phone user needs to confirm the bill, and then send the bill to the short message. Bank SMS server.

The SMS server is the device that the bank is responsible for receiving short messages from the mobile phone. It is connected to the backend server (settlement network) of the bank. After receiving the bill in the short message of the user, the short message server will transfer the bill to the background server for settlement, and the background server will send the settlement result to the short message server through the network, and the short message server will send the settlement result to the mobile phone user by using the short message.

However, at present, the short message sent by the mobile phone lacks an effective means to identify the true identity of the sender, so that the recipient of the short message cannot judge the true identity of the sender. The recipient of the short message can only see the sender's phone number, and it is obviously unreliable to authenticate the identity of the sender of the message by phone number.

Therefore, the short message server cannot judge the true identity of the user 100% of the received short message. The mobile phone user cannot correctly judge whether the sender is a bank or not by receiving the short message. Such a trading model is also insecure and may be maliciously attacked by others, causing losses to users and banks. Summary of the invention

The technical problem to be solved by the present invention is to avoid the above-mentioned deficiencies of the prior art and to provide a method for identity authentication using short messages, which is shortly transmitted by the SIM card development kit STK (SIM TOOL KIT) of the mobile phone. The sender's identity (digital signature) is added to the information, so that the receiver can accurately obtain the sender's true identity by verifying the identity in the short message, so that the above consumption mode becomes safe.

The solution to solve the above technical problem is to provide a method for authenticating an identity by using a short message, which is used for identity authentication between a mobile terminal and an electronic server during electronic payment or transfer, and is based on a mobile terminal and a short message server. And a short message communication system established between the server and the backend server, wherein the smart SIM card of the mobile terminal is a smart card having a wireless communication function, in addition to the ordinary S IM function, and has an encryption and digital signature function, the method includes the steps :

A. The mobile terminal operates the STK menu of the smart SIM card to edit or establish a short message and sends it to the smart SIM card. After the smart SIM card joins its own identity authentication identifier and the security data header, the short message is sent. Go to the mobile terminal, and then send it to the short message server by the mobile terminal;

B. After receiving the short message, the short message server verifies the signature of the identity authentication identifier in the short message, and sends the short message with successful verification to the background server for processing;

C. The short message server organizes the result processed by the background server into short information, adds its own identity authentication identifier signature, security data header, and processing identifier, and sends the result to the mobile terminal;

D. The mobile terminal identifies the received short message and confirms that it is a short message processed by the background server, and forwards it to the smart SIM card for processing;

E. The smart S IM card verifies the identity authentication identifier, and if the verification succeeds, the STK active command includes the short message content and sends the content to the mobile terminal; the verification failure sends the STK active command to include the verification failure information to the mobile terminal;

F. The short message content is completely stored in the smart SIM card.

The step of adding the identity authentication signature and the security data header in the step A further includes the following steps: A1. The smart SIM card of the mobile terminal summarizes the content of the short message, and stores the content in the short message. The private key of the department encrypts the digest to obtain the signature data;

A2. Attaching a security data header in front of the short message content according to GSM 03.48, and identifying the signature short message in the security data header field, and copying the signature data into the security data header;

A3. The smart SIM card transmits the signature short message to the mobile terminal by using an active STK command.

The step of adding the identity authentication signature and the security data header in the step C further includes the following steps: C1. The short message server summarizes the short message content, and encrypts the abstract by using the private key of the internal server to obtain a signature. Data

C2. The short message server attaches a security data header in front of the short message content according to GSM 03.48, and identifies it as a signature short message in the security data header field, and then copies the signature data into the security data header;

C3. The short message server sets the TP-PID field of the short message to be the SIM card processing identifier, and sets the TP-DCS field to Cl as s 2.

The mobile terminal in step D identifies the received short message, and further includes the following steps: after receiving the short message, the mobile terminal (101) determines the TP-PID and TP-DCS fields of the short message, if the TP-P The field identifier is a SIM card processing identifier, and the TP-DCS field is C las s2 , and the received short message is sent to the smart SIM card (102) through an ENVELOPE (SMS-PP DOWNLOAD) command.

The intelligent SIM card in step E verifies the identity authentication identifier, and further includes the steps of:

E1. The intelligent SIM card analyzes a field in the secure data header of the short message according to the GSM 03.48 protocol, and determines whether it is a signature short message, and if so, reads the signature data;

E2. The smart S IM card verifies the signature information in the short message by using the sender's public key, that is, the ID card authentication ID of the short message server.

The signature short message sending end - the mobile terminal and the short message server store respective identity authentication identification information; the signature short message receiving end mobile terminal and the short server store or can obtain the identity card authentication identification information of the other party. The smart SIM card includes an integrated card and a device that relies on the SIM card body to implement the expansion of the original SIM card into an electronic wallet and has an encryption and decryption function.

The short message identity authentication identifier is a digital signature, and the algorithm for generating and verifying the signature includes an ECC and/or RSA algorithm.

The identity verification and signature verification of the ID card for the short message by the mobile terminal is completed in its smart SIM card.

Compared with the prior art, the beneficial effect of the present invention is that: the mobile phone can accurately know the identity of the sender by sending a bill message with the sender signature information to the bank, and the bank can verify the identity of the sender, thereby The bill in the box performs a secure operation on the user account. Similarly, the bank can send a text message with its signature information to the user, telling the user about the operation of his account. After receiving the SMS with the bank signature, the user's mobile phone verifies the signature, so that the user can safely know the status of his account.

DRAWINGS

Figure 1 is a schematic diagram of the implementation of the present invention;

2 is a flow chart of the mobile terminal, such as a mobile phone signature short message transmission, according to the present invention; FIG. 3 is a flow chart of the short message receiving and transmitting short message of the short message server according to the present invention;

4 is a flow chart of receiving a short message of a mobile terminal, such as a mobile phone, according to the present invention;

In the following, the invention will be further elucidated with reference to preferred embodiments shown in the drawings.

Referring to FIG. 1, the method for authenticating an identity authentication using the short message of the present invention is: based on a mobile terminal

101. A short message communication system established between the short message server 103 and the background server 104. The smart SIM card 102 of the mobile terminal 101 has an encryption and digital signature function in addition to the ordinary SIM function, and is characterized by the steps of:

A. The mobile terminal 101 operates the STK menu editing of the smart SIM card 102 or establishes a short message to be sent to the smart SIM card 102, and the smart SIM card 102 adds its own identity authentication identifier and After the security data header, the short message is sent to the mobile terminal 101, and then sent by the mobile terminal 101 to the short message server 103;

B. The short message server 1 03, after receiving the short message, verify the signature of the identity authentication identifier in the short message, and send the short message with successful verification to the background server 104 for processing;

C. The short message server 103 organizes the result processed by the background server 104 into short information, adds its own identity authentication identifier signature, security data header and processing identifier, and sends it to the mobile terminal 101;

D. The mobile terminal 101 identifies the received short message and confirms that it is the short message processed by the background server 104, and forwards it to the smart SIM card 102 for processing;

E. The smart S IM card 102 verifies the identity authentication identifier, and if the verification succeeds, the ST active command includes the short message content sent to the mobile terminal 101; the verification failure sends the STK active command to include the verification failure information to the mobile terminal 101;

F. The short message content is completely stored in the smart SIM card 102.

The step of adding the identity authentication signature and the security data header in the step A further includes the following steps: A1. After the smart SIM card 102 of the mobile terminal 101 summarizes the short message content, the private key pair stored in the internal Encryption to obtain signature data;

A3. The smart SIM card 102 transmits the signature short message to the mobile terminal 101 by an active STK command.

The step of adding the identity authentication signature and the security data header in the step C further includes the following steps: C1. The short message server 1300 summarizes the short message content, and encrypts the abstract by using the private key of the internal server. Obtain signature data;

C2. The short message server 1300 attaches a security data header in front of the short message content according to GSM 03.48, and identifies it as a signature short message in the security data header field, and then copies the signature data into the security data header. ; C3. The short message server 103 sets the TP-PID field identifier of the short message as the SIM card processing identifier, and sets the TP-DCS field to C las s 2.

The mobile terminal 101 identifies the received short message in step D, and further includes the following steps: after receiving the short message, the mobile terminal 101 determines a TP-PID and a TP-DCS field of the short message, such as a 杲TP-PID The field identifier is a SIM card processing identifier, and the TP-DCS field is C las s 2 , and the received short message is sent to the smart SIM card 102 through an ENVELOPE (SMS-PP DOWNLOAD) command.

The smart S IM card 102 in step E verifies the identity authentication identifier, and further includes the steps of:

E1. The smart SIM card 102 analyzes a field in the secure data header of the short message according to the GSM 03.48 protocol, and determines whether it is a signature short message, and if so, reads the signature data;

E2. The smart S IM card 102 verifies the signature information in the short message using the sender's public key, that is, the identity card authentication identifier of the short message server 103.

The signature short message transmitting end - the mobile terminal 101 and the short message server 103 store respective identity authentication identification information; the signature short message receiving end - the mobile terminal 101 and the short server 103 store or can obtain the identity card authentication identifier of the other party information.

The smart SIM card 102 includes an integrated card and a device that relies on the SIM card body to implement the expansion of the original SIM card into an electronic wallet and has an encryption and decryption function.

The ID card authentication identification signature and signature verification of the short message by the mobile terminal 101 is completed in its smart SIM card 102.

Referring to the figure 2, the implementation steps of the mobile phone user signature short message transmission are:

A. As shown in step 201 of FIG. 1, the short message content of the smart SIM card 102 menu is operated by the mobile terminal 101 to establish short message content;

B. As shown in step 202 of FIG. 2, after the smart S IM card 102 obtains the short message content, after summarizing the short message content, the digest is signed by using the private key stored in the smart SIM card 102; C. As shown in step 203 of FIG. 1, the security data header is added in front of the short message data according to the GSM03.48 protocol, and the signature flag and the signature data are added in the security data header;

D. As shown in step 204 of FIG. 2, the smart SIM card 102 transmits a short message to the mobile terminal 101 via the STK active command.

E. As shown in step 205 of FIG. 1, the mobile terminal 101 completes the sending of the short message to the short message server 103.

Referring to Figure 3, the steps for receiving and sending SMS SMS signature SMS are:

A. As shown in step 301 of FIG. 3, the short message server 103 receives the signature short message;

B. As shown in step 302 of FIG. 3, after receiving the short message, the short message server 103 analyzes the secure data header of the short message according to the GSM03.48 protocol. If it is a signed SMS, the signature data is read.

C. As shown in step 303 of FIG. 3, after the short message server 103 reads the signature data, it immediately verifies the signature using the sender's public key.

D. As shown in step 304 of FIG. 3, if the signature verification is successful, the content of the 4 bar short message is transmitted to the background server 104, and the corresponding operation is performed by the background server 104, and the operation result is returned to the short message server 103.

E. As shown in step 305 of FIG. 3, the short message server 103 organizes the received operation result as a short message content.

F. As shown in step 306 of FIG. 3, the short message server 103 performs a post-sum signature on the short message content by using its private key;

G. As shown in step 307 of FIG. 3, the short message server 103 adds a security data header in front of the short message data according to the GSM03.48 protocol, and adds a signature flag and signature data to the security data header;

H. As shown in step 308 of FIG. 3, the short message server 103 sets the TP-PID field in the short message protocol data unit to process the short message for the SIM card;

I. As shown in step 309 of FIG. 3, the short message server 103 sets the TP-DCS field in the short message protocol data unit to Class 2;

J. As shown in step 310 of FIG. 3, the short message server 103 sends a short message to the mobile phone user. Referring to FIG. 4, the implementation steps of the mobile phone user signature short message receiving are:

Α. As shown in step 401 of FIG. 4, the mobile terminal 101 receives the signature short message;

Β As shown in step 402 of FIG. 4, the mobile terminal 101 finds that the TP-DCS of the short message is C las s

2. The TP-PID processes the short message for the S IM card, and uses the received short message ENVELOPE (SMS-PP)

The DOWNLOAD) command is sent to the smart SIM card 102.

C. As shown in step 403 of FIG. 4, after receiving the short message, the smart SIM card 102 analyzes the secure data header of the short message according to the GSM03.48 protocol. If the signature is a short message, the signature data is read.

D. As shown in step 404 of FIG. 4, after the smart SIM card 102 reads the signature data, the signature is verified using the sender's public key.

E. As shown in step 405 of FIG. 4, if the signature verification is successful, the smart SIM card 102 transmits the content of the short message to the mobile terminal 101 through the STK active command.

F. As shown in step 4 of FIG. 406, if the signature verification fails, the smart SIM card 102 sends a "verification failed" message to the mobile terminal 101 via the STK active command.

G. As shown in step 407 of FIG. 4, the mobile terminal 101 receives the active command, and displays the short message or the verification failure information on its interface.

The above-described implementation process is a preferred implementation process of the present invention, and the usual changes and substitutions made by those skilled in the art on the basis of the present invention are included in the protection scope of the present invention.

Claims

Claim

A method for authenticating an identity using a short message, which is used for identity authentication between a mobile terminal (101) and an electronic server during electronic payment or transfer, and based on a mobile terminal (101), a short message server (103), and a background A short message communication system established between the servers (104), the smart SIM card (102) of the mobile terminal (101) has an encryption and digital signature function in addition to the ordinary SIM function, and is characterized by the steps of:

A. The mobile terminal (101) operates the STK menu editing of the smart SIM card (102) or sends a short message to the smart SIM card (102), and the smart SIM card (102) adds its own identity authentication signature and security. After the data header, the short message is sent to the mobile terminal (101), and then sent by the mobile terminal (101) to the short message server (103);

B. After receiving the short message, the short message server (103) verifies the identity authentication identifier in the short message, and sends the short message with successful verification to the background server (104) for processing;

C. The short message server (103) organizes the result processed by the background server (104) into short information, adds its own identity authentication identifier signature, security data header, and processing identifier, and then sends the result to the mobile terminal ( 101);

D. The mobile terminal (101) identifies the received short message and confirms that it is a short message processed by the background server (104), and forwards it to the smart SIM card (102) for processing;

E. The smart SIM card (102) verifies the identity authentication identifier, and if the verification succeeds, the STK active command includes the short message content sent to the mobile terminal (101); the verification failure sends the STK active command to include the verification failure information to the mobile Terminal (101);

F. The short message content is stored intact in the smart SIM card (102).

2. A method for identity authentication using short messages according to claim 1 The method includes: adding the identity authentication signature and the security data header in step A, and further comprising the steps of: A1. The smart SIM card (102) of the mobile terminal (101), after the summary of the short message content, is stored in the The internal private key encrypts the digest to obtain the signature data;

A3. The smart SIM card (102) is transmitted to the mobile terminal (101) by the signature short message described by the active STK command.

The method for authenticating an identity by using a short message according to claim 1, wherein: adding the identity authentication signature and the security data header of the self in step C, the method further comprises the steps of:

C1. The short message server (103) summarizes the short message content, and encrypts the digest by using the private key of the internal server to obtain signature data;

C2. The short message server (103) attaches a security data header in front of the short message content according to GSM 03.48, and identifies it as a signature short message in the security data header field, and then copies the signature data into the security data header;

C3. The short message server (103) sets the TP-PID field identifier of the short message to be the SIM card processing identifier, and sets the TP-DCS field to Class 2.

The method for authenticating an identity by using a short message according to claim 1, wherein: in step D, the mobile terminal (101) identifies the received short message, and further includes the following steps: After receiving the short message, the terminal (101) determines the TP-PID and TP-DCS fields of the short message. If the TP-ID field identifier is the SIM card processing identifier and the TP-DCS field is Class2, the received short message is passed. The ENVELOPE (SMS-PP DOWNLOAD) command is sent to the smart SIM card

The method for authenticating an identity by using a short message according to claim 1, wherein the smart SIM card (102) verifies the identity authentication identifier in step E, and further includes the steps of:

E1. The smart SIM card (102) analyzes a field in the security data header of the short message according to the GSM 03.48 protocol, and determines whether it is a signature short message, and if so, reads the signature data;

E2. The smart S IM card (102) verifies the signature information in the short message using the sender's public key, that is, the ID card authentication identifier of the short message server (103).

6. A method for identity authentication using short messages according to claim 1, wherein:

The signature short message transmitting end mobile terminal (101) and the short message server (103) store respective identity authentication identification information; the signature short message receiving end mobile terminal (101) and the short server (103) store or can obtain the other party's identity card Certification identification information.

7. A method for identity authentication using short messages according to claim 1, wherein:

The smart SIM card (102) includes an integrated card and a device that relies on the SIM card body to implement the expansion of the original SIM card into an electronic wallet and has an encryption and decryption function.

The method for authenticating an identity using short messages according to any one of claims 1 to 3, characterized in that:

The signature of the short message identity authentication identifier is a digital signature, and the algorithm for generating and verifying the signature includes an ECC and/or RSA algorithm.

9. A method for identity authentication using short messages according to claim 1, wherein:

The identity verification and signature verification of the identity authentication of the short message by the mobile terminal (101) is done in its smart SIM card (102).